Lucene search
K

1399 matches found

BDU FSTEC
BDU FSTEC
added 2021/10/06 12:0 a.m.1 views

The vulnerability of the Apache HTTP Server’s web server, related to pointer arithmetic errors, allows attackers to cause service interruptions.

The vulnerability of the Apache HTTP Server is related to pointer arithmetic errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

7.8CVSS7.5AI score0.24982EPSS
Exploits0References6Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/10/05 12:0 a.m.4 views

The vulnerability of the syntactic analyzer in the mac80211 subsystem of the Linux operating system’s kernel allows a perpetrator to trigger a service failure due to pointer arithmetic errors.

The vulnerability of the syntactic analyzer in the mac80211 subsystem of the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability allows an attacker to cause a service failure by injecting a 802.11a frame...

5.5CVSS6.5AI score0.00269EPSS
Exploits0References10Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/10/05 12:0 a.m.2 views

The vulnerability of the Linux kernel driver in Nitro Enclaves, related to pointer arithmetic errors, allows an attacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Linux kernel driver in Nitro Enclaves is related to errors in pointer assignment when closing file descriptors for enclaves. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

6.8CVSS6.9AI score0.00301EPSS
Exploits0References5Affected Software2
Code423n4
Code423n4
added 2021/09/29 12:0 a.m.5 views

IndexPool.mint() Unchecked arithmetic can overflow that allows stealing of almost all the funds in the pool

Handle WatchPug Vulnerability details /// @dev Mints LP tokens - should be called via the router after transferring bento tokens. /// The router must ensure that sufficient LP tokens are minted by using the return value. function mintbytes calldata data public override lock returns uint256...

7AI score
Exploits0
Code423n4
Code423n4
added 2021/09/29 12:0 a.m.21 views

IndexPool.mint() Unchecked arithmetic can overflow that allows stealing of almost all the funds in the pool

Handle WatchPug Vulnerability details /// @dev Mints LP tokens - should be called via the router after transferring bento tokens. /// The router must ensure that sufficient LP tokens are minted by using the return value. function mintbytes calldata data public override lock returns uint256...

7AI score
Exploits0
BDU FSTEC
BDU FSTEC
added 2021/09/20 12:0 a.m.4 views

The vulnerability of the avahi_s_host_name_resolver_start function in the Avahi service discovery system in local networks allows a attacker to trigger a service failure. This vulnerability is related to pointer arithmetic errors.

The vulnerability of the avahishostnameresolverstart function in the Avahi service discovery system in local networks is related to pointer arithmetic errors. Exploiting this vulnerability can allow attackers to cause service failures...

5.5CVSS6.8AI score0.00374EPSS
Exploits1References9Affected Software4
BDU FSTEC
BDU FSTEC
added 2021/09/20 12:0 a.m.1 views

The vulnerability of the ucompthread function in the stream.c component of the Lrzip compression program, related to pointer arithmetic errors, allows a malicious actor to cause a service failure.

The vulnerability of the ucompthread function in the stream.c component of the Lrzip compression program is related to pointer arithmetic errors. Exploiting this vulnerability could allow a remote attacker to cause a service failure through the use of a specially created compressed file...

6.5CVSS6.3AI score0.00713EPSS
Exploits1References5Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/09/20 12:0 a.m.2 views

The vulnerability of the lzo_decompress_buf function in the stream.c component of the Lrzip compression algorithm, related to pointer arithmetic errors, allows a hacker to cause a service failure.

The vulnerability of the lzodecompressbuf function in the stream.c component of the Lrzip compression program is related to pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to cause a service failure by using a specially created compressed file...

6.5CVSS6.2AI score0.00929EPSS
Exploits1References6Affected Software3
Code423n4
Code423n4
added 2021/09/08 12:0 a.m.11 views

Arithmetic Error - manualRebalance function has multiple arithmetic bugs

Handle tabish Vulnerability details In short there are 2 errors in manualRebalance function : a ratio currentLockRatio has been compared to balance newLockRatio and at another point in the same function subtracted . 1 Expanding on the first one - checking newLockRatio Solution: Instead the if...

6.8AI score
Exploits0
Prion
Prion
added 2021/08/25 7:15 p.m.12 views

Integer overflow

An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input when decoding the atom associated with the “csgp” FOURCC can cause an integer overflow due to unchecked arithmetic...

6.8CVSS8.7AI score0.0143EPSS
Exploits1References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/08/20 12:0 a.m.1 views

The vulnerability of the Bash command shell, related to pointer arithmetic errors, allows attackers to compromise data integrity and cause service failures.

The vulnerability of the Bash command shell is related to errors due to incorrect command sequencing. Exploiting this vulnerability allows a remote attacker to compromise data integrity and cause service failures...

8.5CVSS5.6AI score
Exploits0References1Affected Software1
CNVD
CNVD
added 2021/08/19 12:0 a.m.24 views

GPAC Project on Advanced Content Integer Overflow Vulnerability (CNVD-2021-64080)

GPAC Project on Advanced Content is an open source cross-platform library that implements the MPEG-4 system standard and provides tools for media playback, vector graphics, and 3D rendering. an integer overflow vulnerability exists in the MPEG-4 decoding functionality in GPAC Project on Advanced...

8.8CVSS3.3AI score0.01963EPSS
Exploits1References1
OSV
OSV
added 2021/08/18 1:15 p.m.16 views

CVE-2021-21844

Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input when encountering an atom using the “stco” FOURCC code, can cause an integer overflow due to unchecked...

8.8CVSS7.2AI score
Exploits0References3
NVD
NVD
added 2021/08/18 1:15 p.m.18 views

CVE-2021-21838

Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input can cause an integer overflow due to unchecked arithmetic resulting in a heap-based buffer overflow that...

8.8CVSS0.0201EPSS
Exploits1References3
OSV
OSV
added 2021/08/18 1:15 p.m.10 views

CVE-2021-21843

Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input can cause an integer overflow due to unchecked arithmetic resulting in a heap-based buffer overflow that...

8.8CVSS7.2AI score
Exploits0References3
Prion
Prion
added 2021/08/18 1:15 p.m.14 views

Integer overflow

Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input can cause an integer overflow due to unchecked arithmetic resulting in a heap-based buffer overflow that...

6.8CVSS8.9AI score0.0201EPSS
Exploits1References3Affected Software2
CNNVD
CNNVD
added 2021/08/16 12:0 a.m.3 views

GPAC Project Advanced Content 输入验证错误漏洞

GPAC Project on Advanced Content is an open source cross-platform library that implements the MPEG-4 system standard and provides tools for media playback, vector graphics, and 3D rendering. an integer overflow vulnerability exists in the MPEG-4 decoding functionality in GPAC Project on Advanced...

8.8CVSS6AI score0.0201EPSS
Exploits1References6
CNNVD
CNNVD
added 2021/08/16 12:0 a.m.2 views

GPAC Project Advanced Content 缓冲区错误漏洞

GPAC is an open source multimedia framework. a buffer overflow vulnerability exists in GPAC Project Advanced Content, which stems from the product's MPEG-4 failure to check the validity of arithmetic results. An attacker could cause memory corruption through this vulnerability...

8.8CVSS6.1AI score0.01695EPSS
Exploits1References6
CNNVD
CNNVD
added 2021/08/16 12:0 a.m.3 views

GPAC Project Advanced Content 缓冲区错误漏洞

GPAC Project on Advanced Content is an open source cross-platform library that implements the MPEG-4 system standard and provides tools for media playback, vector graphics, and 3D rendering. an integer overflow vulnerability exists in the MPEG-4 decoding functionality in GPAC Project on Advanced...

8.8CVSS6AI score0.0201EPSS
Exploits1References7
CNNVD
CNNVD
added 2021/08/16 12:0 a.m.5 views

GPAC Project Advanced Content 缓冲区错误漏洞

GPAC Project on Advanced Content is an open source cross-platform library that implements the MPEG-4 system standard and provides tools for media playback, vector graphics, and 3D rendering. an integer overflow vulnerability exists in the MPEG-4 decoding functionality in GPAC Project on Advanced...

8.8CVSS6AI score0.02019EPSS
Exploits1References6
Rows per page
Query Builder